Skip to content

Bump the rust-dependencies group across 1 directory with 8 updates - #9

Open
dependabot[bot] wants to merge 1 commit into
v3from
dependabot/cargo/rust-dependencies-aed89b8696
Open

Bump the rust-dependencies group across 1 directory with 8 updates#9
dependabot[bot] wants to merge 1 commit into
v3from
dependabot/cargo/rust-dependencies-aed89b8696

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 27, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the rust-dependencies group with 8 updates in the / directory:

Package From To
reqwest 0.12.28 0.13.4
redis 0.27.6 1.6.0
sha2 0.10.9 0.11.0
uuid 1.24.1 1.25.0
rand 0.8.7 0.10.2
hmac 0.12.1 0.13.0
wgpu 26.0.1 30.0.1
pollster 0.3.0 1.0.1

Updates reqwest from 0.12.28 to 0.13.4

Release notes

Sourced from reqwest's releases.

v0.13.4

tl;dr

  • Add ClientBuilder::tls_sslkeylogfile(bool) option to allow using the related environment variable.
  • Add ClientBuilder::http2_keep_alive_* options for the blocking client.
  • Add TLS 1.3 support when using native-tls backend.
  • Fix redirect handling to strip sensitive headers when the scheme changes.
  • Fix HTTP/3 happy-eyeball connection creation.
  • Upgrade hickory-resolver to 0.26.

What's Changed

New Contributors

Full Changelog: seanmonstar/reqwest@v0.13.3...v0.13.4

v0.13.3

tl;dr

  • Fix CertificateRevocationList parsing of PEM values.
  • Fix logging in resolver to only show host, not full URL.
  • Fix hickory-dns to fallback to a default if /etc/resolv.conf fails.
  • Fix HTTP/3 to handle STOP_SENDING as not an error.
  • Fix HTTP/3 pool to remove timed out QUIC connections.
  • Fix HTTP/3 connection establishment picking IPv4 and IPv6.
  • Upgrade rustls-platform-verifier.
  • (wasm) Only use wasm-bindgen on unknown-* targets.

What's Changed

... (truncated)

Changelog

Sourced from reqwest's changelog.

v0.13.4

  • Add ClientBuilder::tls_sslkeylogfile(bool) option to allow using the related environment variable.
  • Add ClientBuilder::http2_keep_alive_* options for the blocking client.
  • Add TLS 1.3 support when using native-tls backend.
  • Fix redirect handling to strip sensitive headers when the scheme changes.
  • Fix HTTP/3 happy-eyeball connection creation.
  • Upgrade hickory-resolver to 0.26.

v0.13.3

  • Fix CertificateRevocationList parsing of PEM values.
  • Fix logging in resolver to only show host, not full URL.
  • Fix hickory-dns to fallback to a default if /etc/resolv.conf fails.
  • Fix HTTP/3 to handle STOP_SENDING as not an error.
  • Fix HTTP/3 pool to remove timed out QUIC connections.
  • Fix HTTP/3 connection establishment picking IPv4 and IPv6.
  • Upgrade rustls-platform-verifier.
  • (wasm) Only use wasm-bindgen on unknown-* targets.

v0.13.2

  • Fix HTTP/2 and native-tls ALPN feature combinations.
  • Fix HTTP/3 to send h3 ALPN.
  • (wasm) fix RequestBuilder::json() from override previously set content-type.

v0.13.1

  • Fixes compiling with rustls on Android targets.

v0.13.0

  • Breaking changes:
    • rustls is now the default TLS backend, instead of native-tls.
    • rustls crypto provider defaults to aws-lc instead of ring. (rustls-no-provider exists if you want a different crypto provider)
    • rustls-tls has been renamed to rustls.
    • rustls roots features removed, rustls-platform-verifier is used by default.
      • To use different roots, call tls_certs_only(your_roots).
    • native-tls now includes ALPN. To disable, use native-tls-no-alpn.
    • query and form are now crate features, disabled by default.
    • Long-deprecated methods and crate features have been removed (such as trust-dns, which was renamed hickory-dns a while ago).
  • Many TLS-related methods renamed to improve autocompletion and discovery, but previous name left in place with a "soft" deprecation. (just documented, no warnings)
    • For example, prefer tls_backend_rustls() over use_rustls_tls().
Commits
  • 11489b3 v0.13.4
  • d31ffbb feat: Expose HTTP2 keep alive configurations in blocking client (#3043)
  • 79ed0d7 feat: support TLS 1.3 as min version under native-tls 🎉 (#2975)
  • fb7bf6a fix: remove unwrap in hickory initialization (#3041)
  • 3da616f fix: update hickory-resolver to 0.26 and adjust code accordingly (#3040)
  • c77e7b2 fix(http3): use happy eyeballs for h3 connect (#3030)
  • 9cbb65b chore: clean up minimal-versions CI job (#3039)
  • 17a7dc5 chore: upgrade MSRV to 1.85 (#3038)
  • 03db63a fix(redirect): strip sensitive headers on scheme change across redirects (#3034)
  • 4b813a8 feat: add tls_sslkeylogfile builder method (#2923)
  • Additional commits viewable in compare view

Updates redis from 0.27.6 to 1.6.0

Release notes

Sourced from redis's releases.

redis-1.6.0

Changes & Bug fixes

CI & operational improvements

New Contributors

Full Changelog: redis-rs/redis-rs@redis-1.5.0...redis-1.5.1

redis-1.5.0

Changes & Bug fixes

CI & operational improvements

redis-1.4.1

Changes & Bug fixes

  • Remove unnecessary sleep from cluster readonly error handling (#2223 by @​nihohit)

CI & operational improvements

  • ci: Allow semicolon_in_expressions_from_macros to make nightly pass (#2218 by @​somechris)
  • tests/acl: Add the missing requirements for token based authentication (#2214 by @​somechris)
  • Makefile: Switch to --locked for module tests on RESP3 (#2222 by @​somechris)

Full Changelog: redis-rs/redis-rs@redis-1.4.0...redis-1.4.1

redis-1.4.0

Changes & Bug fixes

... (truncated)

Commits

Updates sha2 from 0.10.9 to 0.11.0

Commits

Updates uuid from 1.24.1 to 1.25.0

Release notes

Sourced from uuid's releases.

1.25.0

What's Changed

New Contributors

Full Changelog: uuid-rs/uuid@v1.24.1...1.25.0

Commits
  • 302e0bf Merge pull request #903 from uuid-rs/cargo/1.25.0
  • b7ccde8 prepare for 1.25.0 release
  • c62dffb Merge pull request #902 from ChrisJr404/serde-bytes-module
  • 8c198b2 Add a serde::bytes module that encodes as a byte string
  • See full diff in compare view

Updates rand from 0.8.7 to 0.10.2

Changelog

Sourced from rand's changelog.

[0.10.2] — 2026-07-02

Fixes

  • Fix possible memory safety violation due to deserialization of UniformChar from bad source (#1790)

Changes

  • Document required output order of fn partial_shuffle and apply #[must_use] (#1769)
  • Avoid usage of unsafe in contexts where non-local memory corruption could invalidate contract (#1791)

#1769: rust-random/rand#1769 #1790: rust-random/rand#1790 #1791: rust-random/rand#1791

[0.10.1] — 2026-02-11

This release includes a fix for a soundness bug; see #1763.

Changes

  • Document panic behavior of make_rng and add #[track_caller] (#1761)
  • Deprecate feature log (#1763)

#1761: rust-random/rand#1761 #1763: rust-random/rand#1763

[0.10.0] - 2026-02-08

Changes

  • The dependency on rand_chacha has been replaced with a dependency on chacha20. This changes the implementation behind StdRng, but the output remains the same. There may be some API breakage when using the ChaCha-types directly as these are now the ones in chacha20 instead of rand_chacha (#1642).
  • Rename fns IndexedRandom::choose_multiple -> sample, choose_multiple_array -> sample_array, choose_multiple_weighted -> sample_weighted, struct SliceChooseIter -> IndexedSamples and fns IteratorRandom::choose_multiple -> sample, choose_multiple_fill -> sample_fill (#1632)
  • Use Edition 2024 and MSRV 1.85 (#1653)
  • Let Fill be implemented for element types, not sliceable types (#1652)
  • Fix OsError::raw_os_error on UEFI targets by returning Option<usize> (#1665)
  • Replace fn TryRngCore::read_adapter(..) -> RngReadAdapter with simpler struct RngReader (#1669)
  • Remove fns SeedableRng::from_os_rng, try_from_os_rng (#1674)
  • Remove Clone support for StdRng, ReseedingRng (#1677)
  • Use postcard instead of bincode to test the serde feature (#1693)
  • Avoid excessive allocation in IteratorRandom::sample when amount is much larger than iterator size (#1695)
  • Rename os_rng -> sys_rng, OsRng -> SysRng, OsError -> SysError (#1697)
  • Rename Rng -> RngExt as upstream rand_core has renamed RngCore -> Rng (#1717)

Additions

  • Add fns IndexedRandom::choose_iter, choose_weighted_iter (#1632)
  • Pub export Xoshiro128PlusPlus, Xoshiro256PlusPlus prngs (#1649)
  • Pub export ChaCha8Rng, ChaCha12Rng, ChaCha20Rng behind chacha feature (#1659)
  • Fn rand::make_rng() -> R where R: SeedableRng (#1734)

Removals

  • Removed ReseedingRng (#1722)
  • Removed unused feature "nightly" (#1732)
  • Removed feature small_rng (#1732)

... (truncated)

Commits

Updates hmac from 0.12.1 to 0.13.0

Commits

Updates wgpu from 26.0.1 to 30.0.1

Changelog

Sourced from wgpu's changelog.

v30.0.1 (2026-08-21)

Bug Fixes

Vulkan

  • Stop passing an un-waited fence to vkAcquireNextImageKHR on non-Windows platforms, which triggered VUID-vkAcquireNextImageKHR-fence-10066 validation errors every frame since v30.0.0. By @​ErichDonGubler in #9855.

Metal

WebGPU

  • Upgrade vendored WebGPU bindings and wasm-bindgen to 0.2.127. This fixes a panic “can't access property "info", arg0 is null” when using the WebGPU backend and requestAdapter() fails. By @​beicause in #10034, backported in #10105.

v30.0.0 (2026-07-01)

Major changes

Optional vertex buffer slots

This allows gaps in VertexState's buffers and adds support for unbinding vertex buffers, bringing us in compliance with the WebGPU spec. As a result of this, VertexState's buffers field now has type of &[Option<VertexBufferLayout>]. To migrate, wrap vertex buffer layouts in Some:

  let vertex_state = wgpu::VertexState {
      module: &vs_module,
      entry_point: Some("vs_main"),
      compilation_options: wgpu::PipelineCompilationOptions::default(),
      buffers: &[
-         &vertex_buffer_layout
+         Some(&vertex_buffer_layout)
      ],
  };

By @​teoxoy in #9351.

Integer shader I/O no longer defaults to @interpolate(flat)

To align with the shading language specifications, naga no longer assumes that integer-typed shader I/O should have flat interpolation, i.e., should not be interpolated. Even though flat interpolation is the only choice for integer I/O, it must be still specified explicitly.

WGSL:

 struct FragmentInput {
     @location(0) tex_coord: vec2<f32>,
-    @location(1) index: i32,
+    @location(1) @interpolate(flat) index: i32,
 }
</tr></table>

... (truncated)

Commits
  • 40f4a34 Release v30.0.1
  • 5e1084c fix(metal): Resolve some color space constants dynamically (#9819)
  • 8bc5e2b Backport "Re-vendor WebGPU bindings (#10034)" to v30. (#10105)
  • 42738aa backport: fix: use vk::Fence::null on non-Windows swapchain (#9918)
  • 1464540 Remove example warning
  • 8bf3e5f Update to v30 (#9790)
  • aa2b790 [core] filter native-only features and limits if
  • 2ea3a1d [vulkan] advertise DownlevelFlags::SURFACE_VIEW_FORMATS if `VK_KHR_swapchai...
  • 69e66d8 add DENO_WEBGPU_STRICT_COMPLIANCE and set it for the CTS job
  • 995ee7b add Limits::max_buffers_and_acceleration_structures_per_shader_stage
  • Additional commits viewable in compare view

Updates pollster from 0.3.0 to 1.0.1

Changelog

Sourced from pollster's changelog.

[1.0.1] - 2026-07-10

Fixed

  • Use doc_cfg instead of doc_auto_cfg for docsrs builds

[1.0.0] - 2026-07-09

Changed

  • FutureExt is now implemented for IntoFuture, not just Future

[0.4.0] - 2024-10-26

Added

  • MSRV policy

Removed

  • All unsafe code

Changed

  • Updated MSRV to 1.69
  • block_on now accepts IntoFuture instead of Future (this is a backward-compatible change)
Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Aug 27, 2026
@dependabot
dependabot Bot requested a review from PISSARAW as a code owner August 27, 2026 04:58
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Aug 27, 2026
@dependabot
Bump the rust-dependencies group across 1 directory with 8 updates
57bc219 
Bumps the rust-dependencies group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [reqwest](https://github.com/seanmonstar/reqwest) | `0.12.28` | `0.13.4` |
| [redis](https://github.com/redis-rs/redis-rs) | `0.27.6` | `1.6.0` |
| [sha2](https://github.com/RustCrypto/hashes) | `0.10.9` | `0.11.0` |
| [uuid](https://github.com/uuid-rs/uuid) | `1.24.1` | `1.25.0` |
| [rand](https://github.com/rust-random/rand) | `0.8.7` | `0.10.2` |
| [hmac](https://github.com/RustCrypto/MACs) | `0.12.1` | `0.13.0` |
| [wgpu](https://github.com/gfx-rs/wgpu) | `26.0.1` | `30.0.1` |
| [pollster](https://github.com/zesterer/pollster) | `0.3.0` | `1.0.1` |



Updates `reqwest` from 0.12.28 to 0.13.4
- [Release notes](https://github.com/seanmonstar/reqwest/releases)
- [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md)
- [Commits](seanmonstar/reqwest@v0.12.28...v0.13.4)

Updates `redis` from 0.27.6 to 1.6.0
- [Release notes](https://github.com/redis-rs/redis-rs/releases)
- [Commits](redis-rs/redis-rs@redis-0.27.6...redis-1.6.0)

Updates `sha2` from 0.10.9 to 0.11.0
- [Commits](RustCrypto/hashes@sha2-v0.10.9...sha2-v0.11.0)

Updates `uuid` from 1.24.1 to 1.25.0
- [Release notes](https://github.com/uuid-rs/uuid/releases)
- [Commits](uuid-rs/uuid@v1.24.1...1.25.0)

Updates `rand` from 0.8.7 to 0.10.2
- [Release notes](https://github.com/rust-random/rand/releases)
- [Changelog](https://github.com/rust-random/rand/blob/master/CHANGELOG.md)
- [Commits](rust-random/rand@0.8.7...0.10.2)

Updates `hmac` from 0.12.1 to 0.13.0
- [Commits](RustCrypto/MACs@hmac-v0.12.1...hmac-v0.13.0)

Updates `wgpu` from 26.0.1 to 30.0.1
- [Release notes](https://github.com/gfx-rs/wgpu/releases)
- [Changelog](https://github.com/gfx-rs/wgpu/blob/trunk/CHANGELOG.md)
- [Commits](gfx-rs/wgpu@wgpu-v26.0.1...v30.0.1)

Updates `pollster` from 0.3.0 to 1.0.1
- [Changelog](https://github.com/zesterer/pollster/blob/master/CHANGELOG.md)
- [Commits](https://github.com/zesterer/pollster/commits)

---
updated-dependencies:
- dependency-name: hmac
  dependency-version: 0.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: pollster
  dependency-version: 1.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: rust-dependencies
- dependency-name: rand
  dependency-version: 0.10.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: redis
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: rust-dependencies
- dependency-name: reqwest
  dependency-version: 0.13.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: sha2
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: uuid
  dependency-version: 1.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: wgpu
  dependency-version: 30.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: rust-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/cargo/rust-dependencies-aed89b8696 branch from a9e460d to 869eb22 Compare August 29, 2026 18:24
@dependabot
dependabot Bot changed the base branch from main to v3 September 5, 2026 03:47
@PISSARAW
PISSARAW force-pushed the dependabot/cargo/rust-dependencies-aed89b8696 branch from 869eb22 to 57bc219 Compare September 14, 2026 21:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@PISSARAW PISSARAW Awaiting requested review from PISSARAW

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants